Mailinglist Archive: opensuse (933 mails)

< Previous Next >
Re: [opensuse] IPv6 firewall
  • From: James Knott <james.knott@xxxxxxxxxx>
  • Date: Sun, 06 Jun 2010 15:17:18 -0400
  • Message-id: <4C0BF43E.3000001@xxxxxxxxxx>
Per Jessen wrote:
James, I only objected to your calling it 'at best a bad hack' when in
fact NAT'ing has been and still is incredibly useful to hundred of
thousands of people.

The fact that it's useful doesn't change the fact that it only became necessary due to a lack of available IPv4 addresses. In the process it violates the IP spec and breaks some protocols. It also causes other issues, such as reaching a computer behind a firewall or connecting sites via VPN, where the same RFC1918 subnet might be in use at both ends. This is one I ran into myself. I was staying at a hotel, where the local subnet was the same as I used at home. As a result, even though I had a VPN, I couldn't access anything on my home network. This situation is really aggravated by the fact that most people don't change the subnet in the router from the default.

To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups